This incident raised a lot of questions that Ian and I consider in the podcast – Was this legal? What are the privacy implications? If it is legal, is it ethical? What duty of care do companies have when dealing with confidential topics? Should Segna expect a mass defection of customers because of this trust violation?